On 19 September 2024, the Belgian Data Protection Authority (DPA) issued new Guidance on the interplay between the recently adopted EU Regulation on Artificial Intelligence (the AI Act) and the General Data Protection Regulation (the GDPR), which aims to provide further insight into the use of artificial intelligence (AI) systems that process personal data. The […] The post Belgian Data Protection Authority Publishes Guidance on the Interplay between the GDPR and the AI Act appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog ..read more

On August 21, 2024, the National Institution of Standards and Technology (“NIST”) released the second draft of its Digital Identity Guidelines, which provides federal agencies with a framework for identity proofing and authentication of external employees, government contractors, and individuals accessing government information systems and services. Building on the first draft of the guidance, the […] The post NIST Releases Updated Draft Guidelines regarding AI Use in Identity Systems appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog ..read more

Ransomware attacks are hitting record highs in 2024 and show no sign of slowing down as new criminal groups enter the scene and employ a variety of evolving tactics. This post identifies key highlights of ransomware activity in 2024 so far. Multiple recent security reports have reported a significant increase in ransomware attacks claimed by […] The post Ransomware Activity Trends in Q2 2024 appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog ..read more

On August 31, the California assembly passed SB1223, which amends the CCPA/CPRA to include “neural data” as a type of sensitive data.  SB1223, which is likely to become law, defines “neural data” as “information that is generated by measuring the activity of a consumer’s central or peripheral nervous system, and that is not inferred from […] The post California Joins the Neural Data Bandwagon appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog ..read more

A recent joint advisory from the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI) and the Department of Defense Cyber Crime Center (DC3) warns of increased collaboration between Pioneer Kitten, an Iranian state-backed threat actor, and various ransomware groups. The advisory highlights how Iranian threat actors are leveraging relationships with affiliates […] The post New Joint CISA – FBI – DC3 Guidance Advises On Ransomware Threats Linked to Iran-Backed Hackers: What Enterprises Need to Know appeared first on Alston & Bird Privacy, Cyber ..read more

On Thursday, August 22, 2024, the United States Department of Justice (“DOJ”) filed a Complaint-In-Intervention in the case of United States of America ex rel. Christopher Craig and Kyle Koza, v. Georgia Tech Research Corp. and Board of Regents of the University System of Georgia (d/b/a the Georgia Institute of Technology) (United States v. Georgia […] The post Department of Justice Intervenes in Cybersecurity Qui Tam Action Against Georgia Tech appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog ..read more

On August 27, 2024, the California state legislature passed Assembly Bill 2013 and sent it to Governor Gavin Newsom for signature. If passed, AB 2013 would require companies that make generative AI systems and services publicly available to Californians to post documentation on their website about the data used to train such AI systems and […] The post California Passes Generative AI “Training Transparency” Bill appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog ..read more

On August 21, 2024, the United States Cybersecurity and Infrastructure Security agency, alongside government agencies in key global allies, including Australia, the UK, Canada, and Japan, released guidance on event logging and threat detection best practices. The guidance was published in response to the increased prevalence of threat actors employing Living of the Land (LOTL) […] The post United States Cybersecurity and Infrastructure Security Agency Issues Joint International Guidance for Event Logging and Threat Detection appeared first on Alston & Bird Privacy, Cyber & Data Strateg ..read more

Last month, the European Data Protection Board – which is composed of the national data protection authorities (‘Supervisory Authorities’) of the countries in the European Economic Area (‘EEA’), as well as the European Data Protection Supervisor (‘EDPS’) – adopted two Frequently Asked Questions (‘FAQ’) documents concerning the EU-U.S. Data Privacy Framework (‘DPF’), aimed at providing […] The post EU Data Protection Regulators Publish Additional Guidance On The EU-U.S. Data Privacy Framework appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog ..read more

On July 30, 2024, the New York Attorney General Letitia James announced she had completed an investigation into the tracking technology practices of popular websites, and used this to create website privacy guides on online tracking for New York businesses and consumers. These consist of a “Business Guide” and a “Consumer Guide.” The Business Guide […] The post New York Attorney General Investigates Companies for Website Tags, Publishes Guidelines on Online Tracking Technologies appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog ..read more